
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File: _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier: X94R1xms/YPtNHXJtmq5xVg53dLlEuYIwb9GReZsNUs=
Subject key identifier: BB:7A:95:F7:E3:57:61:AB:8E:E3:61:40:37:E7:3C:BA:A4:19:A1:80
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number: 021D
Signing time: Mon 21 Sep 2026 03:01:06 +0000
Manifest this update: Mon 21 Sep 2026 03:01:05 +0000
Manifest next update: Mon 28 Sep 2026 03:01:05 +0000
Files and hashes: 1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: TSSrUksMu+Bm5B3LtzsIawSmOl3EcglADILIpmtWbEM=)
2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: vlIQijSPBbvP9L65iKqCctaPnA/4JGm7yNBkYuL1NNg=)
3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: gg1NxyOoVbC4W+3Hh9sYPb23rvpu8aUKKSd8lTa2xx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: Sep 21 03:01:05 2026 GMT
Not After : Sep 28 03:01:05 2026 GMT
Subject: CN=6ab09df2-1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:46:ce:d3:90:a5:9d:ad:4f:4c:0a:e2:00:
fb:92:5c:46:51:93:48:2b:a7:85:a6:a5:ae:3e:f0:
de:99:d5:5e:17:8a:ec:58:1b:df:b1:59:74:af:39:
d6:bf:31:05:59:41:ce:99:ea:c9:10:ad:72:5c:a5:
f9:12:cc:34:9f:53:c7:bb:8f:6d:22:4f:d0:52:67:
2d:b8:e2:44:b5:ea:df:bb:0e:69:85:7b:24:1b:86:
fb:42:b5:b6:0f:d4:17:6f:94:c7:a5:b4:14:9a:a8:
d5:ec:29:5e:ee:d4:e6:2c:1c:a4:e8:68:47:a4:dc:
a7:47:6c:3e:20:37:10:5d:73:c8:c1:0a:37:75:66:
d2:74:e6:3d:42:c2:b8:7f:ab:c4:5d:95:af:ef:78:
64:36:a3:bb:67:10:81:07:b6:41:57:82:3a:d5:e3:
b6:df:87:36:66:34:cf:3f:b7:7f:a6:69:35:36:7f:
4e:e6:d2:b8:49:8e:04:e6:6a:12:f6:a0:9d:51:ae:
57:81:c8:21:ac:f7:eb:96:81:47:1e:22:3b:13:07:
0b:cc:65:8f:af:d6:4c:aa:f9:72:52:b5:b1:b6:45:
a2:b8:0d:9b:41:ed:27:f8:7d:02:13:01:bf:48:5f:
f2:08:8a:ec:fd:bc:96:73:bb:b2:e7:aa:27:92:28:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:95:F7:E3:57:61:AB:8E:E3:61:40:37:E7:3C:BA:A4:19:A1:80
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:85:9b:c3:d2:c5:df:5a:00:04:2c:8f:81:67:2f:a1:80:75:
35:41:85:f9:c8:99:53:a2:26:92:70:41:f5:de:3a:f2:fd:bd:
c6:34:79:2e:54:32:b6:9b:67:c3:1e:c8:01:bc:60:14:38:0e:
ad:12:48:51:71:f5:a1:01:73:fc:2f:bb:1e:6f:07:13:c7:84:
8d:36:47:b2:f4:5c:c7:0c:4c:8e:2e:77:1e:4f:f1:0d:87:98:
cc:28:46:82:74:7f:0d:00:83:fd:20:1b:f2:96:a9:71:49:11:
d8:ac:ec:0d:1c:74:18:94:2b:68:30:c2:ae:96:c8:09:f0:04:
10:23:a5:4c:11:1c:90:22:c7:e3:d6:0e:dd:fa:07:eb:8f:d4:
6c:18:79:a0:16:bb:e3:2f:81:33:20:50:7d:06:b7:17:9f:8c:
01:42:ce:9d:28:dc:f5:15:66:5a:40:cd:d8:59:0b:e8:33:5d:
be:8f:cc:fc:80:cf:8b:c6:f0:c8:5a:4d:29:55:81:bf:e0:7d:
c6:0d:79:35:77:ba:71:35:d3:28:79:f2:00:06:59:31:37:78:
ce:b3:70:48:1c:81:da:9f:45:4a:22:12:42:8a:ae:37:6a:8e:
cc:f8:4a:90:6a:35:ea:03:5b:18:77:b4:9f:20:4f:12:71:37:
00:0e:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:54:11 2026 by rpki-client